Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 15

Vulnerabilities 5

• Medium 5.5
  CVE-2017-2618

  A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. A…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 27, 2018
• Unscored —
  CVE-2016-8650

  The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated …

  linux-raspi2 linux-hwe linux linux Debian Ubuntu
  Nov 28, 2016
• Unscored —
  CVE-2016-9793 Public exploit

  The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk_sndb…

  linux-raspi2 linux linux linux-aws Debian Ubuntu
  Dec 28, 2016
• Unscored —
  CVE-2017-2636 Public exploit

  Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or caus…

  linux-raspi2 linux-hwe linux linux-gke Debian Ubuntu
  Mar 7, 2017
• Unscored —
  CVE-2017-6074 Public exploit

  The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST …

  linux-raspi2 linux-hwe linux linux Debian Ubuntu
  Feb 18, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1395187
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1402013
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1419916
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1423071
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1428319
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1429613
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0932.json
• report
  https://access.redhat.com/security/cve/CVE-2016-8650
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-8650
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-8650
• report
  https://access.redhat.com/security/cve/CVE-2016-9793
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-9793
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-9793
• report
  https://access.redhat.com/security/cve/CVE-2017-2618
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-2618
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-2618
• report
  https://access.redhat.com/security/cve/CVE-2017-2636
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-2636
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-2636
• article
  https://a13xp0p0v.github.io/2017/03/24/CVE-2017-2636.html
• article
  https://access.redhat.com/security/vulnerabilities/CVE-2017-2636
• report
  https://access.redhat.com/security/cve/CVE-2017-6074
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-6074
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-6074
• article
  https://access.redhat.com/node/2934281